一种基于图重写的计算机安全风险分析系统  

A Computer Security Risk Analysis Model Based on Graph Rewriting System

作　　者：李娜[1] 谢冬青[1] 

机构地区：[1]湖南大学计算机与通信学院,长沙410082

出　　处：《计算机科学》2006年第8期271-274,共4页Computer Science

基　　金：国家自然科学基金资助项目(No.60373085)

摘　　要：基于项重写的安全风险分析的抽象规约模型在代数签名的基础上直接得到结果,没有提供相关攻击步骤明确描述,没有提供决策和攻击之间关系的统一视图,容易导致威胁的传播。为此,本文首先将图重写方案引入模型中,证明了引入图重写规则以后的风险分析系统仍然是终止的。然后利用图重写规则,提出了一种可以获得更优决策集合的方法,在改进的求带权二分图最小覆盖的方法的基础上,获得了一种具有相同时间复杂度和更高代价利益比的方法。整个模型高效、易于管理。The computer security risk analysis model bases on term rewriting comes out with the result immediately form algebra signature, ignoring the reduction procedure of related attack, providing no unified view of decisions and attacks, making it easy to propagation threat. This paper introduces graph rewriting into this model, and proves the new risk analysis system to be terminating. Also a new decision selection method is put forward with the help of the graph rewriting rule. Basing on the algorithm of the weighted vertex cover algorithm, this paper presents a new method of decision selection with the same time complexity and more benefit.

关 键 词：风险分析 图重写 终止 最小覆盖 

分 类 号：TP312[自动化与计算机技术—计算机软件与理论]